Agentics
Monthly
Remote code execution and information disclosure in IBM Db2 Genius Hub (1.1, 1.1.1, 1.1.2) and IBM Agentics 1.0 stem from the use of inherently dangerous functions invoked without sufficient input restrictions, allowing remote attackers to run arbitrary code or read sensitive data. IBM's PSIRT reported the flaw with a 9.8 critical CVSS reflecting network-reachable, unauthenticated exploitation with full confidentiality, integrity and availability impact. There is no public exploit identified at time of analysis, and the low EPSS score (0.33%, 25th percentile) suggests exploitation is not yet widespread.
Remote code execution and information disclosure in IBM Db2 Genius Hub (1.1, 1.1.1, 1.1.2) and IBM Agentics 1.0 stem from the use of inherently dangerous functions invoked without sufficient input restrictions, allowing remote attackers to run arbitrary code or read sensitive data. IBM's PSIRT reported the flaw with a 9.8 critical CVSS reflecting network-reachable, unauthenticated exploitation with full confidentiality, integrity and availability impact. There is no public exploit identified at time of analysis, and the low EPSS score (0.33%, 25th percentile) suggests exploitation is not yet widespread.